Inconsistent GPO Loopback Processing

[JamboD]

Hi,

 

Long time lurker, first time poster here! I'm hoping that someone here might be able to help me out with an issue that I'm having where a GPO doesn't apply consistently.

 

We have group policies set up which lock a computer down (disabling proofing tools in Word etc...) but there only seems to be about a 50/50 chance of the policies applying correctly. There is no obvious pattern to combinations of users and computers, we can't guarantee that an account which successfully logs on to a computer once will subsequently be able to log on to that same computer correctly again.

 

I've looked through the Group Policy\Operational log and the only thing I can say with certainty is that when an account successfully logs on the loopback processing is set to Merge mode, if it doesn't apply properly LBP will have been set to Replace. It doesn't appear to matter which DC the computer communicates with during log on.

 

I've checked all GPOs and in every case where LBP is configured on a policy it is set to Merge.

 

Has anyone got any bright ideas that may be able to help me as I'm out of ideas and Googling LBP just returns the same old "What is loopback processing?" articles.

 

Thanks!